Security and compliance
Remote safeguards your organisation’s and employees’ confidential HR and payroll information using industry-leading security and compliance measures.
Remote provides a secure platform for payroll, benefits, tax and compliance so you can scale your international team with assurance. The security of your organisation’s data and that of your employees is one of our highest priorities.
We hold ISO27001 certification, comply with SOC 2 and are CSA Star Level 1 accredited, reflecting our stringent security policies and procedures.
These accreditations demonstrate our ongoing commitment to upholding the highest security standards.
Independent third-party auditors routinely assess and validate our practices, ensuring a robust and dependable security posture you can rely on.
Our infrastructure operates within segregated networks with tightly restricted, fully auditable access.
We shield our systems using advanced firewalls that feature threat detection and prevention capabilities.
To ensure compliance and protection, we use Amazon Web Services as our cloud provider; it adheres to rigorous industry standards: SOC 1,2,3, ISO 27001/27017/27018, PCI-DSS
Our dedicated Security team protects your business through comprehensive security practices.
Application security audits: We assess applications for vulnerabilities and keep audit logs of access and changes to strengthen network security.
Data security: We treat personal and employee information with care, encrypting data both in transit and at rest.
Internal security: We apply the Least Privilege Principle to limit system access to essential personnel. All internal tools and systems mandate SSO, and we carry out periodic recertification and training to maintain our strict standards.
When collecting and storing critical personal information about your organisation and hires — such as salary details, addresses, bank account information and government-issued IDs — extreme caution is required.
Remote Data Protection Guard provides market-leading policies, processes and controls that ensure compliance with the world’s most stringent privacy laws.
To strengthen security for Remote users and their data, we have enabled two-factor authentication (2FA) and single sign-on (SSO) for logins.
2FA asks users to enter a code delivered to a mobile device using an authenticator app such as Google Authenticator or Duo Mobile. SSO can be activated across an organisation, allowing users to sign in to the Remote platform securely with their company credentials.
We don’t let our commitment to your data’s security slow you down.
Our tools and processes help us maintain 99.999% uptime.
Our best-in-class product boasts industry-leading response times of under 150ms.
We continuously monitor applications and infrastructure, back up data daily, and ship applicational logs off site, where they are kept for 30 days.
Our HR and payroll security policies and procedures are externally validated and certified by the top security institutions in the world.
Remote complies with GDPR by ensuring data remains encrypted and secure no matter where it needs to travel. We empower your employees to modify or delete their personal data upon request, maintaining the highest standards outlined in the GDPR.
All sensitive records, including key documents and data, are encrypted and accessible only to the owner and platform administrators. We reduce exposure by deleting any data not essential for business operations. If you wish to contact us about security, please send an email to [email protected]
Discover Remote’s full range of products and services.
Employ full-time workers anywhere in the world.
Onboard and pay contractors around the world in their own currencies with zero hidden fees.
Remote offers industry-leading security and reliability.
Get ironclad IP protection that ensures full ownership of what's yours.
Accelerate your global business with confidence.
Remote take the security of it’s customers very seriously and strive to continuously improve it. In this context the work done by the security research community provides an important contribution. If you find a vulnerability that affects Remote, please fill the form below including all the necessary details to reproduce the issue, therefore helping us to fix it promptly.
Remote's Vulnerability Disclosure Program is critically important to us. We are constantly monitoring our platforms to protect and improve security. If you find a potential weakness, please notify our Security team so we can investigate.
Payroll security refers to the measures a company must take to protect its payroll data and financial assets from potential threats, such as fraud, data breaches, and unauthorised access. It requires the implementation of numerous safeguards, including safe data handling practices, a secure IT infrastructure, and strong security policies and procedures.
Payroll abuse (also known as payroll fraud) occurs when an employee or a malicious party exploits vulnerabilities in a company’s financial management system to misappropriate funds.
Payroll carries a range of risks, for example:
Incorrect tax calculations
Failure to comply with local employment legislation
Cyber attacks
Human error
Inaccurate record keeping
For organisations operating internationally, it is vital to understand and comply with the payroll regulations and tax systems in the countries where your employees are based. Non-compliance can lead to substantial penalties and fines, and can harm your reputation.
Outsourcing payroll to an unfamiliar third party also carries risks — loss of control, data breaches, inferior service or regulatory non-compliance by the provider. That is why partnering with a trusted, reliable supplier is essential.
Finally, be aware of internal fraud risks, which can include:
Ghost employees
Falsified hours
Inflated commission schemes
Pay rate manipulation or alteration
Payroll records can be compromised in several ways. They may be exposed through insider threats (for example, data theft by a disgruntled employee) or via external attacks. If your company relies on outdated systems with known vulnerabilities, you will be especially vulnerable to these threats.
Many breaches happen through the following methods:
Phishing attacks. Attackers may deceive payroll staff into disclosing their login details, granting unauthorised access to payroll systems.
Malicious software. Malware and viruses can damage systems, exfiltrate data or disrupt payroll operations.
Ransomware attacks. This involves malicious software that encrypts your data. Attackers typically demand a significant ransom to restore access to systems.
To protect your payroll you should implement comprehensive security measures, including:
Robust encryption
Multi-factor authentication
Strict access control
Robust firewalls
When outsourcing payroll, ensure your chosen platform is kept up to date and well supported, and that ISO-standard security protocols are implemented. Regularly train your staff on security best practice, such as creating strong passwords and recognising phishing attempts.
Finally, assess the continued effectiveness of your security through periodic audits and risk assessments.